Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
File:                     eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json)
Hash identifier:          EQ+KUvpL8apD5lwLmObz27BYu7xYkz69JgQonfxX0UA=
Subject key identifier:   75:7A:EC:8C:D9:06:51:4D:57:AD:AE:12:72:57:7C:1F:E3:BB:FC:E8
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Certificate issuer:       /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial:       019923A05BC5BA63E0A19FD8DB24F7700D73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 10:02:15 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:15 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:15 +0000
Files and hashes:         1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=)
                          2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: amzP43olseSn4uJjcTPrE2EiAsx6+gE9594JUn/ZdQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:5b:c5:ba:63:e0:a1:9f:d8:db:24:f7:70:0d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
        Validity
            Not Before: Sep  7 10:02:15 2025 GMT
            Not After : Sep  8 10:02:15 2025 GMT
        Subject: CN=757aec8cd906514d57adae1272577c1fe3bbfce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:1e:11:6c:30:04:1a:4c:6b:6e:51:28:86:
                    8a:63:10:b6:f6:cf:62:95:00:b4:84:2e:33:dd:5d:
                    37:a7:7c:e4:c2:ac:75:70:1e:91:b9:ab:a6:0c:4f:
                    f2:ab:f0:20:4f:3d:ce:65:1e:ec:ab:0c:c2:61:d2:
                    1a:84:6b:0e:5d:24:c8:02:62:ff:db:1b:d0:03:69:
                    c4:76:5d:35:44:ec:02:b5:ef:12:5e:40:2d:4c:ff:
                    c6:cd:3d:38:97:c1:24:ed:62:68:e7:a9:f8:e4:65:
                    99:94:80:7f:7b:cc:a0:3d:a9:f8:02:e6:bb:10:d7:
                    d7:75:ea:22:58:48:71:57:86:84:14:6a:da:dd:1b:
                    b4:4c:d0:ce:6e:2e:f0:07:59:e0:1b:ee:6e:0f:2d:
                    b1:2a:73:b0:82:e7:35:27:5a:e4:c8:87:3b:28:10:
                    dc:ae:c8:d3:a5:2b:91:b4:22:f6:7e:b6:28:36:26:
                    49:99:93:6e:55:3c:0e:44:b2:89:6c:51:d0:b2:99:
                    18:f1:76:1a:ed:d6:b0:30:63:de:2a:a2:15:b0:64:
                    ff:7d:bc:af:06:ee:ed:92:e5:88:4a:00:5c:27:14:
                    8b:b2:95:89:75:75:32:d6:c8:5b:55:b9:61:b4:8f:
                    78:22:99:2f:52:14:87:dd:3c:a3:c5:e4:35:a6:cd:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7A:EC:8C:D9:06:51:4D:57:AD:AE:12:72:57:7C:1F:E3:BB:FC:E8
            X509v3 Authority Key Identifier:
                keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:17:4f:c1:cf:c3:c0:3e:78:23:12:b7:eb:a1:77:be:fc:c9:
         c4:0d:0c:ae:ce:ce:cc:9e:44:2a:df:53:68:e9:56:53:91:8e:
         c1:f1:88:5e:7c:58:27:a6:94:26:73:7a:06:e8:1a:fa:10:0f:
         13:e7:77:e3:9c:96:2b:29:62:85:28:76:10:26:06:5a:79:f0:
         e2:34:63:9c:46:3e:91:a9:d3:40:fd:16:62:78:dc:d2:fd:bc:
         2a:2e:26:b9:48:a5:4d:61:b3:92:3a:76:5c:69:1c:ea:da:58:
         9c:b1:77:a9:60:b3:3b:8a:e3:a1:48:f0:8c:2c:5f:48:38:82:
         f9:7f:8f:3c:27:b2:9b:bf:6e:2d:cc:c2:89:bb:2b:57:ad:cb:
         b9:7c:86:aa:83:b2:04:d0:d1:62:c1:92:ea:b6:01:6b:16:83:
         45:10:3e:76:6e:b9:b5:52:d4:55:3f:a9:fb:e8:53:d5:7c:ae:
         09:b8:60:7f:f5:45:4f:04:ad:2e:0d:37:fe:9b:d5:73:94:95:
         28:2e:21:b9:2a:dd:8f:e7:04:92:74:90:ae:f0:3b:1a:17:6b:
         a0:27:6b:77:cd:a1:25:5e:d6:d3:30:cf:43:7e:bf:57:f5:79:
         8b:1e:8d:c7:4c:5d:1d:b5:fa:f4:fb:a3:ad:8b:e9:16:0d:8f:
         e9:9b:e7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:27 2025 by rpki-client